filebeat can be deployed as a daemonset but a codec needs to be developed to do so and collect logs from all pods.